Just to clarify, this is only exploitable for people which already has access to your tailnet. So people you already gave access. External attackers can’t do anything. But keep your software updated as always.